OpenClaw Plugin Poisoning, CVE Pile-Up, and the Matrix Plugin Blocked Mid-Install
Security
OpenClaw's built-in scanner flagged its own officially verified Matrix plugin for environment variable access combined with network sends, which is exactly the pattern you'd use to exfiltrate API keys. This is a serious trust problem: if official plugins trip the detector, the whole extension ecosystem is suspect.
News
OpenClaw nearly doubled its internet-facing instance count to 500K in a single week, and there is still no fleet-wide patch mechanism, meaning every admin has to update manually. A threat actor sold root access to a U.K. CEO's live OpenClaw instance including production DB, API keys, and real-time conversation data, framing it as a live intelligence feed.
Analysis
Certik Study: OpenClaw Has 100+ CVEs, 280 Security Advisories, and 135K Instances With Auth Disabled
Certik's March 31 audit calls OpenClaw's security state a systemic collapse, with the critical CVE-2026-25253 allowing full admin hijacking via a single malicious link. The platform was built for trusted local environments and is now deployed at internet scale with none of the hardening that requires.
Stay Ahead
Delivered each morning.